U.S. Department of Justice 



Federal Bureau of Investigation 

Washington, D.C. 20535 



FOUNDATION 
NUE, NORTHWEST 


July 30, 2007 


Subject: SYSTEM DCS-3000 and Red Hook 
FOlPANo. 1056287-000 and FOlPA No. 1056307-1 


Dear Ms. Hofmann: 

The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOlPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from disclosure, 
with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page Information sheet was 
inserted in the file to indicate where pages were withheld entirely. The exemptions used to withhold information are marked 
below and explained on the enclosed Form OPCA-16a: 


Section 552 Section 552a 


® (b)(1) 

□(b)(7)(A) 

□(d)(5) 

®(b)(2) 

□(b)(7)(B) 

°0)(2) 

□(b)(3) 

B(b)(7)(C) 

□(k)(1) 


□(b)(7)(D) 

□(k){2) 


H(b)(7)(E) 

□(k)(3) 


□(b)(7)(F) 

□(k)(4) 

□(b)(4) 

□(b)(8) 

□(k)(5) 

®(b)(5) 

□(b)(9) 

□(k)(6) 

®(b)(6) 


□(k)(7) 


996 page(s) were reviewed and 781 page(s) are being released. 


□ Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 

□ referred to the OGA for review and direct response to you. 

□ referred to the OGA for consultation. The FBI will correspond with you regarding this 
information when the consultation is finished. 

iHi You have the right to appeal any denials in this release. Appeals should be directed in 
writing to the Director, Office of Information and Privacy, U.S. Department of Justice,1425 
New York Ave., NW, Suite 11050, Washington, D.C. 20530-0001 within sixty days from the 
date of this letter. The envelope and the letter should be clearly marked “Freedom of Information 
Appeal” or “Information Appeal.” Please cite the FOlPA number assigned to your request so that it 
may be easily identified. 



n The enclosed material is from the main investigative file{s) in which the subject(s) of your request was 
the focus of the investigation. Our search iocated additional references, in files relating to other 
individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information simiiar to the information processed in the main file(s). 
Because of our significant backlog, we have given priority to processing only the main investigative file(s). 
If you want the references, you must submit a separate request for them in writing, and they will be 
reviewed at a later date, as time and resources permit. 

^ See additionai information which follows. 


Sincerely yours. 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


Enclosure(s) 


Please be advised that this is the third interim reiease as ordered by the court on May 7, 2007 for 
documents concerning surveillance systems known as DCS-3000 and Red Hook. 

A decision has not been made concerning your request for a waiver of fees. We will be corresponding 
with you concerning that request in the near future. In the interim, we are providing you with the enclosed documents. 
Pursuant to Title 28, Code of Federal Regulations, Section 16.11, there is a fee of ten cents per page for duplication. 

No fees are assessed for the first 100 pages, if it is determined that you do not qualify for a fee waiver, duplication fees 
will be assessed accordingly. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to sueh Exeeutive order; 

(b)(2) related solely to the internal personnel rules and praetices of an agenejr, 

(b)(3) specifically exempted fl-om disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters he withheld fi-om the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation 
with the agency; 

(b)(6) personnel and medical files and similar files the diselosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) (l) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistieal records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the diselosure of whieh would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidenee; 

(k)(6) testing or examination material used to determine individual qualifieations for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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CSIM Notes: 
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2) Files w/ problems: 1,2 

3) File 3 is clean 



Notes on DCS-3000; 
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LAESP-SIM-Ora 
Q&tnpKm 
]aesp_procedure&wpd 
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1.0 Summary: 

This document outlines the operational procedures for the LAESP-PLAY program, CSIM test 
simulator, sniffer, CVT, and other related tools. 

1.1 History: 
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3.16 Setup for Automatic Testing: 
TBD 
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Appendix A - Programs: 


Table A>1 Programs 


Program 

Version 

Purpose 


? 

1 1 

DCS-3000 

4.5o 

CALEA target 




1 1 


1 
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1 \ 

Windovws 2000 


Windows operating system 
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Appendix H - QUESTIONS: 

1, Do we wanti I 

^ i W6u ia ttava w use sams nan ttumbar aagh time 

- for exarnpi yi H 

- SPONSQRl I ^ 


2. What is the test sequence? Can we minimize l I changes? 

DONE 

3. Should wft contr ol at J I 

I J need l i input on this....] „ 

I I this seems to work, but need to update ) | 

4. I h s rather slow ) V : should we get a faster machine if possible? ! [ this 

is in progress.... — need ! l and DCS3000 on new computer] 

5. What should our redundancy plan be? I recommend loading )" 

I I n.e.. both windows boxes have both apps.). 

— This is the plan 
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6 . 

7. 


Can w e run | 

I I separate box 


J on same box or is a separate box desired/required? 
ed„..J 


Need to write procedures for archiving information. 
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5/28/96 


X 


X 


FM FBI QUANTICO (268-HQ-1001725) /ROUTINE/ 
TO DIRECTOR FBI (268-HQ-1001725) /ROUTINE/ 
LEGAT OTTAWA/ROUTINE/ 

BT 

T 

CITE; //0857// 


PASS: FBIHQ, INFORMATION RESOURCES DIVISION, MRS. MORRIS, 

ROOM 5829. 


(U) 


(S) 


SUB JlCT i TRAVEL TO OTTAWA CANADA; 5/30/ 96 AND 6/4 - 7/ 96 

FOR THE INFORMATION OF LEGAT OTTAWA, EST-4, ELECTRONIC 
STOVEILLANCE TECHNOLOGY SECTION, INFORMATION RESOURCES 

requbstedP 

riDte" 


I TO PROVIDE TECHMICAL 

AHSXBTAJNCE wItW THE INITIAL SETUP OF AWfEXPERIMENTAL SYSTEM. 
THIS SYSTEM, CODENAMED REDHOOK, IS AN INTEGRATED SERVICES 
DIGITAL NETWORK INTERCEPT SYSTEM. FBI PERSONNEL ARE REQUESTED 
TO- DELIVER AND SETUP ONE .SYSTEM. .FOrT RETURN 

THE SYSTEM AFTER THREE MONTHS. ' 

attendance from EST-4 WILL BE SUPERVISORY SPECIAL 

_] ELECTRONICS 


3 


^ AND ELECTRONICS TECHNICIAN 


<S) 


(S) 


TRAVEL ON 5/30/96 WILL BE A ROUND TRIP ON A BUREAU PLANE 
WITH .PIE SOLE PURPOSE OF DELIVERING THE REDHOOK SYSTEM TO 




xxvrtVEL ON 6/4-7/96 WILL BE BY COMMERCIAL AIRLINE. DURIN G 
THESE DATES, THE ABOVE MENTIONED PERSONNEL. WILL... ASSIST IN 

the setup AND EVALUATION OF REDHOOK SYSTEM. LEGAT* ' 

ASSISTANCE IS REQUIRED FOR LODGING. A RENTAL CAR IS REQUIRED 
FOR THE DURATION OF THE STAY. 

, POINT OF GONTaPT BTIR THTC EFFORT isf 


BT COPY COUNT PAGE 
268-HQ-1001725 


_JCAN BE REA< 

— t. 
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Working Copy- 


Precedence : ROUTINE 

TO: Information Resources 

From: Information Resources 

oni( 
Contact: [ 

Approved By 


Date: 07/1/1996 


Electron ic Surveillance Technolo gy Section, es t- 4 
' [ extension (703) [ 


,.CF 


Drafted By: | | llp 

Case ID #: (U) 269-HQ-1001725 (Pending) 

Title: 

(C) 


E 


NETWORKS ACCESS DEVELOPMENT (EST-4) 

PTgDHnoTf ppr>.TBT->r 


Synopsis; Trip report for travel to Ottawa, Canada in 

j 1 ^ J support of loaned M j 


Reference; (U) FD540 #1612992 Serial 

Details; On g/4/Qfil ~ 


[traveled to Ottawa. Canada"at‘: ^■hp naTnicua^ rvJ*" 



b7C 

b7E 


(C) 


_ The purpose of this travel was to demonstrate a 

RedHook xntegrated services digital network (ISDN) intercept 
sy stem fo r possible deployment and purchase of additional systems 

J The RedHook system that was used for this demonstration 

temporary loan td ^for three months with an 


IS on a temporary 
anticipated return date 


^ 4 - 1 , I The system was successfully installed and tested 

t Inuring testing it was discovered that the 
ISDN Ixnes xnstalled for thxs demonstration were not functioning 
no^ally. The Ixnes were experiencing abnormally high far end 
bxt errors (FEBEs) . These FEBEs were occurring in bursts that 
repeatedly caused the RedHook serial bridge to go into a safety 
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Page 2 


bypass mode. When an ISDN line tester was placed on the line, 
the FEBEs were found to be intermittent and of varying severity. 


(C) The I k ere briefed on the RedHook 

system during a period when the FEBEs were not as severe. 
Following the briefing, | [gave a live demonstration 
using the ISDN lines that were experiencing FEBEs. During the 
demonstration, the system performed perfectly. 


After the briefing was concluded, the ISDNJJjiea 

again returned t.n a of ahnor-manv hinh gTCRgo r I 

RfciUHOOk aygtfem t 6 Ahbth^r iocatiori tha ' f has known good lines. ' 



(O- 


. m. 


^gain. advised! 
action, at thiV" 


t the 


that the best possibie action, at thi Vi Lima, m to tgangpcf t cne 
system to another location that has known good lines and proceed 
with the testing of the RedHook system. 

CCi I I 
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Case ID #; 
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Title: (U) 

EST-4 


REDHOOK 


TRIP REPORT 
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EST-4[] 


, Itr aveled to tne San Francisco Office (SFO) to survey a 

possiDie j p eployment of the RedHook integrated services 

digital network (ISDN) inter^ pt systen ^ | 


(U) 


eslf^ 


(U) 


Details; On 11/13/96. 

conduct a site survey for a possime| 
RedHook ISDN intercept system. The 
the SFO for this effort is I 
case agent is ) 


jtraveled to the SFO to 
Jdeployment of the 
leal point of contj act in 

also from tile SF(^ 


The under cover (UC) location for the collection 
and storage of the data forwarded from the RedHook collection 
device is in | 1 This site has e xisting Tl 

facilities but tnis equipment does not support the | | 

required to forward the intercepted data being forwarded from the 
subscriber location. 
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Title : UNESCORTED ACCESS 

ENGINEERING RESEARCH FACILITY (ERF) 

REDHOOK PROJECT 

ISSUANCE OF RETENTION BADGE 

Synopsis; I I employee | j ls presently assigned to 

assist the Network Access Development Unit (EST-4) with matters 
pertaining to the RedHook project. EST-4 is asking the Technical 
Operation s Section to issue a retention badge to 


Details; The es t- 4 Re dHook pro ject is beincr sup ported by I I 

employee I 1 1 | has a | j clearance and 

presentl y is allowed unescorte d acce ss to the E^. Because 

1| works in this facility ! I days a week a retention badge 
wouia limit the administrative burden associated with daily 
checking in. 

I [ has been working for EST-4 I . . — I — . 

working|“^ [Says a week on-site. It is expec ted that! | 

will cohriAUe to wor k at the , ER F for a minimum | | — The”' 

point of contact for! ^ j is EST-4 Electronics Engineer 

LEAD (s): 

Set Lead 1; 

ALL RECEIVING OFFICES 


Issue a retention badge to j | 

j b7C 
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iRoom 6032 

Room 6875 
Room 6875 


(Enclosures 3) 

Attn : 
Attn: j 
Attn: 

1 1 Room 7110 

1 Room 5835 


Information Resources 

Electronic Surveillance Technology Section, EST-4 

NADU, QT ERF 

Contact; I 


[](703)[[ 


Approved By; Morris Carolyn G 
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Title: NETWORK ACCESS DEVELOPMENT UNIT 

PROJECT REDHOOK 
CONTRACT ACTION 
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Synopsis: The EST-4 Unit is recommending that funding be approved 
to enhance the RedHook processing and distribution unit (PDU) . 
Additional funding is also being asked for to support present and 
future case support. 


Enclosures : 


STATEMENT OF NEED 
INTERNAL CON CEPT PRO 
Requisition d 




Details; FBI Contrac 


1 Z]was issued to F I 

[This contract was divid ed into | phases ; 
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At the completion of this contract it was determined that the 
^ system reoj iired further development prior to implementing 

3^as issued tcT 


FBI Contract L 




i I The purpose of this contract is to 

tnat the future RedHook production systems meet the FBI's 
intercept requirements. The Contracting Officer's Technitax 
^ Representative for this contract is Electronics Engineer 

Enhancements that have been added to the RedHook system 
thus far in the contract are multi-point collection capability, 
automatic database recovery, bridge transparency improvements, 
-Hjjg cards placed in the virtual memory extended 


During a Hgni t-Vin system the 

[caused several 


i: 


oniems . Tne problems are related to the fact that 


^is rapidly becoming defunct. 


TheP 


processing of incoming data from thel 
is used to migrate the capturei ^‘ 


lavs tern 


to control the 


ttor - g B ^niiu ET on 'g o ' tl^e use r- 
' wa^katAtions tor monitoring and storage . 




I ~l used to control this data 

is being 

discontinued. — The updated] i, lis incompatible 

I |used with the RedHook PDU. After three 

months ot trying to unsuccessfully get the manufacturer to fix 
the incompatibility problem, it is the Contracting Officer's 
Technical Representative's opinion that an alternate! Hshould 
be designed. T 1 

There are several advantages to a redesign of the j j 

A personal compute r based I Iwp uld grea£jj£_reduce the 
cost of purcha sing ! bvste ms j i based l I 

costs ! ^while a PC based } [ is estimated to cost 


T 


The design of the j 

- V . ;^- . t; . h the RedHoox nnage unit would have to be 

I pc card form factor but not re-designed, 


The PC base^ jwould greatly reduce ^ 

weight of th ^ -- j 

I , , i weigns | bpunds and is ! Inn hta.ci 

while the PC base d | poul d weigh less than! {pounds 
and is a standard[ lynches) . ' ' 
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The RedHook Project is approaching | 1 the 

procurement phase. GSA has already given approval for an 

indefinite p urchase - indefin ite quantity c ontract with | | 

I 1 with a ceiling of| > It_j,s anticipated ' 

tnat this development effort will cost j | The purchase of 

11 systems will be the break-even point for the cost of this 
enhancement . 


(S) 


(S) 


It is anticipated that there will be multiple 
United States government agencies purchasing RedHook systems, as 
w ell as,_bpJ:h3 :l!L4^ 


EST-4 is recommending that the Contx»g.t-Rey.i.ew Pnit 

(CRU) coo rdinate 


the I 

based personal computer. 


e th^ tasking of | 

• to enhance tne j ~| Spe citically to redesig n 

I to operate on a| | 


] 


EST-4 is also asking for additional funding for both 
case support and new development of system enhancements required 
for future ,df ployments . The additional funding for this effort 

is I I 


, Requisition ! ~| date d 8/28/96 is in place for 

I I and requisition j I dated 5/29/97 is enclosed to 

tuna this effort. LEAD (s)^ 
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FINANCE DIVISION 


[ 


additilonal 


That the CRU coordinate the enhemcement tasks for 
I to upgrade the RedHook system and add 
funding for case support. 


Set Lead 2 ; 
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NATIONAL SECURITY 

For Information purposes only. 

Set Lead 4: 

INFORMATION RESOURCES 

For Information purposes only. 
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Electronic Sxirveillance Technology Section, EST-4 

NADU, QT ^EE , , 

Contact: I (703) I I 
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Case ID #: 268-HQ-1001725 (Pending) 

Title: NETWORK ACCESS DEVELOPMENT UNIT (NADU) 

PROJECT REDHOOK 
CONTRACT ACTION 

Synopsis: The EST-4 Unit is recommending that funding ofT 

be approved to support the Information Resources Division, 
Investigative Applications Support Unit's Signal Related 
Information Database Input/Output Format. 

Enclosures: Requisition number I I 


Details: On 6/27/97 I 

Investigative Applications Support 
Surveillanc e Technology personnel | 

database outputl^^^^^^ Kungoj 


] Unit Chief of the 
met with Rlentronic! 


' meeting was | [ employe^" 


Also present at the 


As a r esult of t his meeting it has become evident that 
additional funding o j I will be required to characterize 

the possible output information collected during anr llawfully 
authorized telecommunication intercept. This funding wil l be 
used to purchase and test a majority of the services that! ts 
presently capable of and documenting how those services are 
stored in the RedHook system's database. 

LEAD (s) : 


Set Lead 1 ; 


All nrFOEl-IATIOU COFTADIED 

HEEEIH IS TJHClASSIFIErr 

DATE 06-04-2007 BY SSlTgDMH/KSR/lHF 


Case ID : 268-HQ-1001725 


Serial ; 60 





Working Copy 
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Precedence: ROUTINE Date: 07/21/1997 

To; Information Resources Attn: | | Room 5835 

(Enclosure) 


From : Information Resources 

Electronic Surveillance Technology Section, EST-4, 

NADU, QT ERF I 1 

Contact: (703) | | 


Approved By 


Drafted By; 


Case ID #: 268-HQ-1001725 (Pending) 

Title; NETWORK ACCESS DEVELOPMENT UNIT 
PROJECT REDHOOK 

CONTRACT REVIEW BOARD (CRB) MEETING 


Morrxs Carolyn G 


lip 


Synopsis: This communication is to notify Assistant Director 

Morris of a CRB meeting on 7/25/97 at 10: 00 a.m. to review an 
enhanceme nt to the RedHook contract with | 1 


Enclosures; History of contract 

Details: The EST-4 Unit has recommended that funding be approved 

to enhance the RedHook project. This enhcmcement funding is for 
development of a new personal computerl I 


LEAD (s) : 
Set Lead 1: 


b2 

b7E 


b6 

b7C 


b2 

b7E 


INFORMATION RESOURCES 

AT WASHINGTON, DC 


For information purposes only. 

CC: I lEn closure) QT ERF 

1 (Enc losure) QT ERF 

I I (Enclosure) QT ERF 


b6 

b7C 


ALL IHFOKHATIOH COHTAIIED 

HEKEIH IS mrCLASSIBTED 

DATE 06-04-2007 BY 65179/DHH/KSR/LHF 


Case ID : 268-HQ-1001725 


Serial : 61 



Working Copy 


Page 


Precedence ; ROUTINE 


Date: 02/05/1998 


To: Finance Division 


National Security 
Criminal Investigative 
Information Resources 


Attn: 


Attn 

Attn 

Attn 


l_Room 6032 
Room 6875 
Room 6875 
mncxoBu re) 

"lo om 7110 
, \ Room 7116 

r oom 5835 
Room 8998 


Information Resources 

Electronic Surveillance Technology Section, 

NADU, QT ESE ^ , I 

Contact; | | (703)| 


b6 

b7C 


Approved By; Morris Carolyn G 


Drafted By: | | : lip 

Case ID #; 268-HQ-1001725 (Pending) 


Title: NETWORK ACCESS DEVELOPMENT UNIT (NADU) 

PROJECT REDHOOK 
CONTRACT ACTION 


] be appro ved to suppo rt the field deployments involving 

r ■ ' 


the collection of [_ 
the replaceme nt of^ 


Enclosures: Q 


Details: The RedHook ISDN intercept system has succ essfully 

co mplet ed its devel opment of a r>p>-r«=tr>na1 r-r>T>ir>nhiaT fPPI T tVio 

pe l I is replacing | 

based solution deployed ]bi“ior th this df»vf» l o pment , Th^ 
requesting that a pre-production quantity of ! I 

be built to certify production quality and replace systems that 
are already fielded. 


b2 

b7E 


b2 

b7E 


Additionally EST-4 is requesting that a field support 
task, with the low level development that is involved with field 
support, be funded t hrough Dece mber 1998. The funding required 
for field support is I | The funding required for the pre-production 

I I The total f unding required for 

tnis contract action is| | b2 

b7i 

The RedHook system has been successfully deployed in 


Case ID ; 268-HQ-1001725 Serial : 72 
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Working Copy - 


I locations with add itiona l locations requesting I ( support . 
These pre-production PC I Twi ll ensure that the FBI maintains a 
core capability to deploy | | intercepts prior to full 

production quantities being procured. 

The field support effort has been extremely valuable in 
all previous RedHook installations due to the complex nature of 
both the technologies present in the collection system, the 
target system, and the forwarding systems. 

I lis, and will rema in, a rapidly developing 

j This requires the FBI to maintain 
a team or engineers capanie or developing field modifications to 
the RedHook system when required to conduct lawfully authorized 
ISDN collections. 


I L s typically used in Internet related 

communications due to its in creased speed a nd reliability over 
modem com munications . These I | connections often 

bring the I j first aaaing to the technical 

overhead on these types of lawfully authorized collections. LEAD (s) : 


b2 

b7E 


Set Lead 1: 


ALL RECEIVING OFFICES 

For informational purposes only. 


LEAD (s) : 

Set Lead 2; 

FINANCE DIVISION 

AT WASHINGTON, DC 

The Finance Division is requested t o schedule a b2 

Contract Review Board meeting and present the | | b7E 

proposal for RedHook funding. 

CC: I L QT ERF 


QT ERF 

b6 

b7C 



Working Copy 


Precedence : ROUTINE 

TO: Information Resources 

From: Information Resources 

Electronip_Slu: 2 £&illa 
Contact ; I 


Date: 08/06/1998 


Section /CIMU/QT-ERF 


Approved By: 


Case ID #: 268 -HQ-1001725 (Pending) 


Title: RED HOOK 

TRIP REPORT 

■q^mr.7-.g-igr To -re port the details of Electronics Technician (ET) 

I ftravel to Melbourne, Florida, to attend the Red 

Hook Digital Intercept System status and planning meeting on 
07/29-31/98. 

ET I I traveled to Melbourn e, Florida to attend a 
I w hich was conducted by 

Electro nics Enqin^fe ri | (EST-4) . The status of 

the Red Hook project was discussed. Matters discussed included 
open tasks, action items, and development time lines. Acceptance 
testing is tentatively plauined for mid September. 

A "lunch Box" computer- based Re d Hook system, called 

"Red Hook Lite," was proposed by I j and apprpyssL_£2£ , 

liiis system will have a simplified 

r and wi ll be designed for quick rfeaccion 

deployment. — ET Iprovided input regarding the tactical 

advantages of the Red Hook Lite system and format of the 
simplified! 1 


INFORMATION RESOURCES 

AT QUANTICO, VA 


For information only. 


ALL lEFFOPHATIOH COMTAIHED 

HEREIN IS TJNCLASSIFIED 

DATE 06-04-2007 BY 65179DHH/K3R/LHF 


Case ID : 268-HQ-1001725 
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Precedence ; ROUTINE 


Date: 03/30/1999 


To: 


Finance 


Criminal Investigative 
Laboratory 


b6 

b7C 


(Enclosure) 


] Roora 6888 
Room 6888 




3r- 


Room 5155 
ERF 


(Enclosure) 


From : Laboratory 

Electronic Surveillance Technology Section, EST-4 


DITU , OT ERF 

Contact: I 1 (703) 


Approved By; 





b6 



b7C 

Drafted By: 

1 

|:llp 


Case ID #; (U) 268-HQ-1001725 (Pending) 

Title: (U) REDHOOK 

CONTRACT ACTION 


Synopsis: (C) Thq 

has delivered funding to the FBI tor the proauction or two 
integrated services digital network (ISDN) collection systems. 
The FBI is also funding the purchase of a number of key system 
components to meucimize its present ISDN deployment ca pability. 
These pre-production prototy pes will be fabricated at | \ 


Enclosure (s) : (U) Requisition number [ 

Details: (C) 

purchase of two ure-'crruu'utrtmh ibuisi iri'c 
, systems ..will be f 




;o the FBI for the 
systems . Thes e 


bl 

b2 

b7E 


(U) The DITD will be purchasing a number of system 
components to maximize the number of lawfully authorized ISDN 
collections the FBI is able to support. The following is a list 
of those components DITU will be purchasing; eight line cards to 


Case ID : 2G8-HQ-1001725 

DATE: 06-04-2007 

CLASSIFIED BT 65179DHH/KSR7LHF 

FEASOH: 1.4 (E/G) 

DECLASSIFf OH: 06-04-2032 


Serial ; 76 
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CO§>^ENTIAL 
Working Copy 


support processing and distribution units, 18 Melcher power 
un its, and 1 8 single slot bridge chassis. The enclosed funding 
of I I is for the purchase of these components. Residual 

funding will be used for case support. 


b2 

b7E 


LEAD(s) : 

Set Lead 1 : (Adm) 

CRIMINAL INVESTIGATIVE 
AT WASHINGTON, DC 
(U) For information only. 

Set Lead 2; (Adm) 

LABORATORY 

AT QUANTICO, VA 
(U) For information only. 

Set Lead 3: (Adm) 

FINANCE 

AT WASHINGTON, DC 

bl 

(58^ That the Finance Divi aion coo rdinata the purchase b2 

of two pre- products £oi| pnd system components b7E 

to support maximizing the FBI's deployment capability. 


CONI 


’lAL 



Working Copy 
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Precedence: ROUTINE Date; 09/01/1999 



From : Laboratory 

Electronic Surveillance Technology Section/EST-4 



Case ID #: 268 -HQ-1001725 (Pending) 


Title: REDHOOK 

PROJECT CLOSEOUT 

Synopsis: EST-4 is requesting that the Project Closeout Report 

for RedHook be approved. 

Enclosure (s) : Project Closeout Report for RedHook Project 

Details; The Laboratory Division, Electronic Surveillance 
Technology Section, EST-4, is responsible for the development of 
lawfully authorized digital telephony collection systems. The 
RedHook Project was developed to facilitate lawfully authorized 
collection of integrated services digital network (ISDN) traffic 
on the subscriber's line. The RedHook development effort has 
been completed. The attached Project Closeout Report documents 
the results of this effort, cuid is being submitted for approval. 

LEAD(s) : 

Set Lead 1: 

LABORATORY 

AT QUANTICO, VA 

That ESTS approve the Project Closeout Report for the 
RedHook ISDN intercept system. 

ALL nTFORHATlOH COHTAIHED 

HERE nr IS OTCLASSIFIED 

DATE 06-04-2007 BY SS179DHH/K3R/LHF 


Case ID : 268-HQ-1001725 


Serial ; 78 



Working Copy 


Precedence : ROUTINE 

To ; Laboratory 


Date; 10/29/1999 


1 1 OTERF 

,1 Fote 

RF (Enc.) 
[qTERF (Enc 
QTERF (Enc.; 

r 

y 


)TERF (Enc.) 


Laboratory 

Electronic Surveillance Technology Section/Operational 

Support Trackinor Office i 1 

Contact: | | (703)| | ^ 


Approved By 


Drafted By; 



b7C 


Case ID #: 268-HQ-1217551 
268-HQ-1001725 

Title: OPERATIONAL SUPPOR T TRACKING OFFICE (OSTO) 


PROJECT REDHOQK 




Synopsis: | land REDHOOK Phase Five Review was 

held on 10/21/1999 at tne Engineering Research Facility. The 
results, conclusions and recommendations f rom these reviews are 
captured in the attached | |and Project REDHOOK 

Phase Five Review Report , dated 10/21/ i999 . 

leuid REDHOOK Phase Review Report 


Details : The Phase Five Review for T 


Enclosure (s) : I 
dated 10/21/197F: 

I land REDHOOK 

was held at the Enginee ring Research Facxiity on 10/21/1999. 

I I Project Leader, Data Intercept Technology 
unit, provided an overview and status of current activities for 
I l and REDHOOK. Key decisions from these 

presentations are captured within the referenced enclosure. 
LEAD(s) : 

Set Lead 1; 


b7C 

b7E 


LABORATORY 

AT QUANTICO, VA 


268-HQ-1217551 Serial : 

268-HQ-1001725 ALL IHFOBHMTON COHTAIHED 
HEREIN IS TJirCLASSIITED 
DATE 06-04-2007 BY 65179DHH/KSR/LHF 





Freedom of Information 
and 

Privacy Acts 

FOIPA# 1056287 and FOIPA#1056307-1 
Subjects: DCS-3000 and RED HOOK 
File Number: DIVISION DOCUMENTS 
Section: 21 



Federal Bureau of Investigation 


From: 

Sent; 

To: 

Subject: 


Friday. May 05. mf 


"loTD) (CON) 


Tm 

10TD)(C0N)| 


RE: Security Issues w/ ERF/TTA Networl<s 




](OTD) (CON) 


b2 

b7E 


Here in TICTU, there is a vast difference between "should be" and "is". I agree that we need to work towards 
"should be" . 1 started to say more in my earlier e-mail and thought better of it. Here we go. , . 

Most of the information that this local security manager is expecting should in fact be in the SSP, Were we to 
have gone down the path of separate accreditations per site then we would have this for our site. Currently we 
are lacking a majority of what this gentleman is asking for | t s correct. It needs to be in the 

documentation. The process of acquiring this information and getting it all i nto a consolid ated SSP is going to 
be a long ro ad that is all uphill. As you may remember after my initial trip to | | l found that the 

I n pield office had no network drawings of their system or interconnecting network interfaces, poor 

training, poor documentation, and a general dependence on outside services such as | | lf we bite 

off on this, we should plan on visiting each site. In a perfect world I would bring on temporary help to travel to 
each site gathering information, pr oducing accurate ne twork drawings, and inventorying the system (this is 
partly why I was concerned that ou j l instnictions received last week, no longer include the site 

system inventory) 

Let me speak in general concerning oui j ( Du d l^ d related doeuraents are in most 

cases the "bare minimum" requ ired to gainl [ when we received } f was surprised. Were 1 inspecting 
TICTU, I too would have ^^dl l items. As you found yesterday, mere is no plan in place to 

accomplish the | I 

b2 

This request troubles me. I am sure this is going to raise questions. Let me know when you want to meet. 'j 


» 


[ 


— Original MawanB-mru , 

From! I K 0TD)(C0N) 


To: 1 loTD) (CON)I 

|0TD) (0)N) 

Subject: Rfc: Security Issues w/ tKl-/ \ i a Networks 

SENSITIVE B.gT UNCLASSiqED 
NON-RECORD 

b6 

b7C 


I I 

The documentation! |was asking for should be included in the SSP's for the system. On the issue of bringing 

in / connecting electronic devils, we probably need to discuss it and’ come up with a plan that is acceptable to the FBI 
as a whole. I know how most of the 1C deals with this issue, but don't know the DOJ answer. 

llCJU isso 



AIL IWrORmTIOET COHTAIMD 

HERE IS IS OTCLASSIFIED 

DATE 06-04-2007 BY 6S179i3iiili/ksE/maj 





My thought Is that there should be unifiecLsosition and (internally) coordinated guidance before the field ie 
informa tion. This will all come rolling Int J l lao if it doesn't go well. He should be informed #1 Ynii | 
I [ should put your headsioaetbeund come up with the answer(s) - this will certainly affect ] | t( 
neeas b be brought in (thru las well. 


I believe the SSP(s) is a living document and can be adjusted over time to meet things that come up like this. The 
Bureau has always been strict nn items connecting to networks/ systems that contain memory, but costs, benefits, and 
risks need to be weighed i fe eems to be becoming the new] for "problems." This has potential to blow 

up. 


I I please see me about this. 


b2 

b7E 



SENSmVE BUT UNCLASSIFIED 
NON-RECORD 


b6 

b7C 



a gave some guidance for the dcs6000, Thanks !^ I 

IF is going to get these requests from everyone In the field, I suggest we w ait for a 
ERF folks on the dcsl 000,3000 and 5000 platforms at which time we can show how| 


unified reply from the 
has configured the 




o 


interconnections, etc. 
Any ideas? 


o 

b6 

b7C 


CcC 


t ?L)(FBl) 
lav. April 36 6s 3:S0 PM 


(FBdC 




^dCTW 


□jOTD) (FBl j 

"iljtDLKFBDC 


l oLXFBni 


Security Issues w/ ERF^TTA Networks 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


^DL) 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b2 

b7E 


b6 

b7C 


Hello y'all - I'm seeking your advice to hopefully save a lot of work. | t just 

returned from Security training and has been designated the computer/networK secunty person for our 
Division (ISSO?). He advised that HQ has mandated that he obtain all sorts of info from our 
systems/networks i.e: DCS 1000, DCS 3000, DCS 5000, DCS 6000 etc. 

I I wants an accounting for all of the systems we, as TTAs & DCSPs, maintain. He wants to have 
diagrams, schematics, charts etc on what we have and how everything is connected. He wants lists of all of 
the general users and all of the limited/admin users. 

Is this duplicating what has already been done @ ERF w/ the security certification for each system? Or is 
there a new mandate to have this info on file w/ the specifics for each individual field office? 

I b iso discussed restrictions regarding cantractors and non employees working on, touching our 
systems. He even mentioned the phone company installers when they come to install/troubleshoot circuits 
etc. My understanding from this conversation is that they are not suppose to bring in computers, test 
equipment, etc that have memory etc. We are suppose to supply the computers/equipment for them to use. 

I know that wher i I comes to install our new! I the week after next, that they will have their own 

computers, flash drives etc. I know that whei fcvas lust here to upgrade our database they brought 

I ■ I will have equipment to test the new 

DCS 3000 network connection in th ^ | RA in the next couple of weeks. 

How pan we best handle this situation? Do I need to get a copies of the certification documents from ERF 
to give t d fo r should we just walk him through our system and have him m ake diagrams. Is there 
somethina in writing that I can read to better understand what I have to do when ! j 

I H etc come into our space? 

Any advice, comments etc would be helpful. b 2 

b7E 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


Monday. June 05. 200i 


l(OTD) (CON) 
15:32 PM 
](OTD)(CON) 


1.1.1 I I 

This system does not connect with any other system. 

X This system connects with the following network(s) or system(s): 

I SYSTEM NA ME I Uca^DITEDBY 

SECRET In process-FBI IAS 

SECRET FBI 

DCS-3000 SBU FBI 

I II ~ UNCLASSIFIED NM 


This is actually Section! 


1 . 1 Physical Environment 


Is the secure facility accredited or 
approved to process and store information 
at the level covered by this SSP? 

Who accredited or approved the facility? 

Provide CITE Nbr & DTG or 
Date of approval letter. 

[3 Yes □ No 

1 |Nil\SecD\Security OperationsN 
Physical Security Unit 

2 November 1998, EC Case Number ID# 
261D-HQ-C1062048-707 

State the classification and level 
(compartment) approved for the facility. 

(3 Secret Q SI Others: 

n Top Secret FI TK 

□ b 


This is actually section! 


t elecom. intercept ana Collection I eclinology Unit (TICTU) 
Ope rational Tec hnoloov nivi<if>n (QTm 








UNCLASSIFIED 

NON-RECORD 




I need contingency plan results for the following systems: 


Data Collection System 3000 
Data Collection System 5000 



Subject: RE: Contingency plan information 


UNCLASSIFIED 

NON-RECORD 



Per our phonecon | |for the systems in question. I'm sure he 

will be able to provide anything you need, i hough i believe that he may be out of the office at 
least part of this week. 

b6 

, b7C 


echnology Management Unit (ETMU) 
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HERE nr IS imCLASSIFIED 

DATE 06-04-2007 BY 65179i±Bh/ksr,/maj 




ElectfQnic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

ERF, Quantico, VA b2 

Tel: (703)1 | b6 

b7C 


— Original Mess age — 
Prom: I 


Se nt: 

Totf 


IsecD) (FBI) 

J July 17, JOK il:26 AM 
(OTD) (FBI) 


Contingaicy plan information 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


^ i neea concirigency plan results for the following systems 

Data Collection System 3000 
Data Collection System 5000 

^ Thankq. ^ 

UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 
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and 

Privacy Acts 

FOIPA# 1056287 and FOIPA#1056307-1 
Subjects: DCS-3000 and RED HOOK 
File Number: DIVISION CDS 
Section: 12 



Federal Bureau of Investigation 


Federal Bureau of Investigation 


SE^T ^ 

r Offimal uii^htly Appendix - E: Applications Inventory & Relationships 



b2 

b7E 



Digital Collection 
System 3000 (aka 


CALEA 

(Communications 
Assistance to Law 
Enforcement Act)) 


DCS 3000 


DCS3000 application suite was developed to 
assist law enforcement agencies (LEAs) with 
collecting and processing data for court- 
ordered electronic surveillance (ELSUR) 
operations. LEAs dial into switdies. 


Investigative 
Technology Division 


( 2 ) 


For Official Use Only 




5/7/2007 
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Federal Bureau of Investigation 
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f ^^ Responsible for Development. Deployment z 
%y ^ Maintenance of Telephone Switch-Based EL 

- Originally Develo^^d Dcb 3000 Solution for 

I ^i’if'bcS 3000 Has^ EvoWed Into a Viable Interim" 
I -^^ SolutTon' Capable ofJn|er+acing With Many ^ 
I of Wireline and Wireless Switches 
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OLELS0 


2006 J^nnual Conference 

^Telecommunications Intercept and Gollection Technology Unit , 
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